#security +

They have a Global Device Identifier (GDID) Tracker that functions as a fingerprint for your PC that can surpass VPNs, proxy servers and countries. Although it can't survive a clean reinstall of Windows (it can survive updates), because Microsoft forces you to go to the internet and log in into a Microsoft account, they will be able to get to you.

Microsoft kept it secret and it was only found out when the FBI tracked a hacker thanks to the information Microsoft gave them.

You should be paying attention to this, and possibly consider moving away from Windows. If a government, especially the US government, doesn't like you for some reason, this could be seriously concerning.

This article specifically notes:

For journalism, activism, or domestic abuse situations, skip Windows and use Linux routed through Tor instead of a commercial VPN. A GDID doesn’t care which VPN you use, only that it’s still the same Windows installation.

Other important quotes:

What has researchers uneasy is everything else the case reveals. Costin Raiu, a well-known malware researcher, asked on the Three Buddy Problem podcast how much of this exists on other platforms, and whether it is linked more permanently to hardware. Matthew Hickey, another security researcher, called Windows “surveillance software”.

Two things back that up:

There’s no consent screen. A GDID gets assigned when you sign into a Microsoft Account. Apple’s advertising identifier needs an App Tracking Transparency prompt and a visible reset; Android’s works the same way. GDID has neither, and a Windows reinstall only gets you a new number Microsoft can still get back to the same account.

Then there’s activation. Massgrave, the group behind Microsoft Activation Scripts, notes that Windows setup sends hardware info to Microsoft and gets identifiers back, the same tokens later used for Store access and licensing: “It’s impossible to prevent Windows from getting a GDID without breaking activation and UWP app[s].” Anyone who lost a license after swapping a motherboard has already met a smaller version of this.

Here's the complaint filed to the court, the primary source for the case mentioned in the article. You can find mentions of GDID on page 30 of the document or 34 of the PDF.

Also From Microsoft’s own FAQ: "Note that Recall does not perform content moderation. It will not hide information such as passwords or financial account numbers. 🤡

Key Takeaways

Federal mandate requires surveillance cameras monitoring driver alertness in new vehicles by 2027

Infrared sensors track eye movement and prevent ignition if impairment detected

Technology adds $100-500 per vehicle cost while raising biometric data privacy concerns

Your next car purchase comes with an unwelcome passenger: a federal mandate requiring surveillance technology that monitors your every blink, glance, and head nod. Thanks to Section 24220 of the 2021 Infrastructure Investment and Jobs Act, NHTSA must finalize rules forcing all new passenger vehicles to include “advanced impaired driving prevention technology”—essentially turning your dashboard into a judgment-free zone that’s anything but judgment-free.

The Technology That’s Watching

Infrared cameras and sensors create a constant biometric assessment of driver alertness and sobriety.

The tech involves infrared cameras mounted on steering columns or A-pillars, tracking eye movement, pupil dilation, and drowsiness patterns. Unlike the breathalyzer ignition interlocks from DUI convictions, these systems operate passively—no blowing required. Your car simply watches and decides whether you’re fit to drive.

If the AI determines you’re impaired (blood alcohol ≥0.08% or showing fatigue), it can prevent ignition startup or limit vehicle speed. Think Minority Report, but for your morning commute.

Timeline for Implementation

The surveillance rollout targets late 2026 to 2027 for all new passenger vehicles.

While NHTSA’s final rule faced delays beyond the November 2024 deadline, automakers will still get 2-3 years for full implementation once regulations are finalized. Your current vehicle stays surveillance-free, but shopping for a 2027 model means accepting this digital copilot.

The timing coincides with broader automotive software integration, making these systems potentially updatable through over-the-air patches—expanding monitoring capabilities post-purchase.

Privacy and Cost Concerns Mount

Data collection worries combine with $100-500 per vehicle cost increases passed to consumers.

The privacy implications extend beyond federal oversight. While the law doesn’t mandate external data sharing, manufacturers could potentially upload biometric data to corporate servers, raising concerns about sharing with insurance companies to adjust your premiums based on driving behavior.

The technology adds significant costs—estimates range from $100-500 per vehicle—that automakers will inevitably pass to consumers already struggling with inflated car prices.

Industry Pushback Intensifies

Automakers oppose the mandate citing technical readiness concerns and sales impact fears.

Car manufacturers argue the technology remains unreliable, warning of false positives that could strand drivers. They’re concerned about customer backlash and potential sales declines as buyers seek older, unmonitored vehicles.

I'd appreciate it if you reblogged this post! I almost fell for that shit!

A Tumblr user called me saying they reported my account by accident and I needed to call a Tumblr support on Discord: Jarell Perry (this Tumblr user account was already hacked, now I know that)

Then I called this guy on Discord. I was desperate cause in the "warning" said my account would be blocked in 24 hours. But the whole conversation was REALLY strange, even more when he gave me, OUT OF NOWHERE, his "certificate":

Here is the "certificate":

He asked, then, for me to change my email and I was like "what kind of support would ask this crap?"

Besides my suspicions, TWO things saved me to fall for this shit:

>>> Another Tumblr Warning: I decided to search a little more and found ONE, ONE POST ABOUT IT ON TUMBLR, by @stuffymcstuffsworldthesecond (here is the link, please check it too and repost).

>>> The original person that called me was hacked: I even went a little further and searched the tumblr user on Google (I needed to contact them some other way to confirm the message) and, guess what, they have an Instagram account AND A NEW TUMBLR ACCOUNT, cause the first one was HACKED!! THE ONE THAT WAS TALKING WITH ME!!! (Here is the post explaining it, also consider to follow this artist, their art is amazing! The NEW and SAFE account is @cypher-030)

THEN, I reported both the scammers and blocked them! Apparently, the hacked Tumblr account that called me is already banned at the time I write this warning! But must be more of them!

EVERYONE, DON'T FALL FOR THIS! If this happened with you, it would mean a lot if you reblogged!

Also, my followers: I will NEVER send a message about anything like this for you on private! I almost NEVER talk on private, I just talk on comments, asks and hashtag reblogs! Please please, know that!

I will mention all my moots here cause I think this whole scam warning is REALLY important!

@illytian @bapple117 @mark-the-snark @mimzy6bunny @bigmegachad @thiamsxbitch @empressnom @neighborhood-cryptic @niafromheaven @batgirl68649 @sunnydeedraws @melodylyricx @ruthlessness69 @autismdonkid @chaoticlycollected @i-am-a-living-god @jaestelle @eliothedud9000 @becacomum @recycledglass @andistarbee1 @gh0st-keeper @pinkydoggy83

Be safe everyone!

Ever wondered how KineMaster stopped some modded clients from accessing their asset market?